ICQ消息处理远程格式串漏洞

BUGTRAQ ID: 28027 CNCAN ID:CNCAN-2008022904 ICQ是一款流行的即时信息通讯程序。 ICQ存在格式串错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当生成HTML代码显示在嵌入IE组件中时存在格式串错误，发送特殊构建的包含格式串字符的消息其他用户，可触发内存破坏，可能以应用程序进程权限执行任意指令。 ICQ Inc. ICQ 6 目前没有解决方案提供： http://www.icq.com/...

DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability

Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

Debian Security Advisory DSA 1500-1 (splitvt)

The remote host is missing an update to splitvt announced via advisory DSA 1500-1. OpenVAS Vulnerability Test $Id: deb15001.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1500-1 splitvt Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

AIX 610000 : U816126

The remote host is missing AIX PTF U816126 which is related to the security of the package bos.sysmgt.servaid You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U815308

The remote host is missing AIX PTF U815308 which is related to the security of the package devices.sas.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Sql injection

SQL injection vulnerability in admin/traffic/knowledgesearchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expandquestion action...

CVE-2008-0821

SQL injection vulnerability in admin/traffic/knowledgesearchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expandquestion action...

CVE-2008-0821

SQL injection vulnerability in admin/traffic/knowledgesearchm.php in OSI Codes Inc. PHP Live! 3.2.2 allows remote attackers to execute arbitrary SQL commands via the questid parameter in an expandquestion action...

CVE-2008-0821

CVE-2008-0821 affects OSI Codes Inc. PHP Live! 3.2.2. The vulnerability is a SQL injection in admin/traffic/knowledge_searchm.php via the questid parameter in an expand_question action, allowing remote attackers to execute arbitrary SQL commands. CVSS v2 base score 7.5 (HIGH) with network attack ...

SuSE 10 Security Update : clamav (ZYPP Patch Number 5008)

This version upgrade to 0.92.1 fixes numerous flaws including some security problems. CVE-2008-0318 / CVE-2008-0728 Please note that the version number of the clamav library has changed in version 0.92. Programs linked against older libclamav therefore need to be updated as well. %NASLMINLEVEL...

Debian Security Advisory DSA 1496-1 (mplayer)

The remote host is missing an update to mplayer announced via advisory DSA 1496-1. OpenVAS Vulnerability Test $Id: deb14961.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1496-1 mplayer Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP Live! = 3.2.2 questid Remote SQL Injection Vulnerability =============================================================== !Info! PHP Live! © OSI Codes Inc. enables live he...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...

Fedora 8 : glib2-2.14.6-1.fc8 (2008-1533)

PCRE 7.6 fixed following bug: A character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode, of course caused a buffer overflow. The GLib release 2.14.6 updates the included copy of PCRE to version 7.6. Note that Tenable Network Security has extract...

PHP Live! 3.2.2 - 'questid' SQL Injection (1)

!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...

Information disclosure

Level Platforms, Inc. LPI Managed Workplace Service Center 4.x, 5.x and 6.x allows remote attackers to obtain sensitive information via a direct request to About/SCAbout.htm, which provides version and patch information...

CVE-2008-0636

Level Platforms, Inc. (LPI) Managed Workplace Service Center versions 4.x–6.x expose_version and patch information via a direct request to About/SC_About.htm, enabling information disclosure to remote attackers. The underlying vulnerability is an information-leak through an unprotected About page...

AIX 530005 : U808632

The remote host is missing AIX PTF U808632 which is related to the security of the package devices.pci.331121b9.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530005 : U807673

The remote host is missing AIX PTF U807673 which is related to the security of the package bos.rte.iconv You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530005 : U800605

The remote host is missing AIX PTF U800605 which is related to the security of the package bos.compat.cmds You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...